Hacker News new | ask | show | jobs
by grishka 1390 days ago
IMO you shouldn't be interpreting passwords at all, besides maybe enforcing a minimum length of 4-6 characters. Other than that you receive a string from the user and you just hash it as is.